PT-2011-1226 · Document Foundation · Libreoffice

Josh Bressers · Published 2011-07-21 · Updated 2012-01-19 · CVE-2011-2685

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions LibreOffice versions prior to 3.3.3

Description The issue is related to a stack-based buffer overflow in the Lotus Word Pro import filter, which can be exploited by remote attackers via a crafted .lwp file. This can lead to arbitrary code execution. The vulnerability may allow an attacker to gain unauthorized access to confidential data, cause a denial of service, or impact data integrity.

Recommendations For versions prior to 3.3.3, update to version 3.3.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of the Lotus Word Pro import filter until a patch is applied. Restrict access to .lwp files to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2020-02949

CVE-2011-2685

DSA-2275-1

Affected Products

Libreoffice

References · 13

• http://mandriva.com/security/advisories?name=MDVSA-2011:172 · Vendor Advisory
• http://cgit.freedesktop.org/libreoffice/filters/commit/?id=d93fa011d713100775cd3ac88c468b6830d48877 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2011-2685 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2011-2685 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2011-2685 · Vendor Advisory
• http://cgit.freedesktop.org/libreoffice/filters/commit/?id=278831e37a23e9e2e29ca811c3a5398b7c67464d · Patch
• https://osv.dev/vulnerability/CVE-2011-2685 · Vendor Advisory
• http://lists.opensuse.org/opensuse-updates/2011-10/msg00019.html · Vendor Advisory
• http://kb.cert.org/vuls/id/953183 · Patch
• https://bdu.fstec.ru/vul/2020-02949 · Security Note
• http://openwall.com/lists/oss-security/2011/07/12/13 · Note
• http://openwall.com/lists/oss-security/2011/07/06/13 · Note
• https://lists.opensuse.org/opensuse-updates/2011-10/msg00019.html · Note